HIPAA Interim Final Rule, October 30, 2009
Client Alert | less than 1 min read | 11.06.09
On October 30, 2009, the Department of Health and Human Services (HHS) published an interim final rule conforming HIPAA's enforcement regulations to revisions made under the HITECH Act. The interim final rule strengthens HHS' civil money penalty authority by establishing categories of violations reflecting levels of culpability, increasing the civil penalty amounts, and modifying the affirmative defenses available to covered entities.
Click here to view a presentation on the HIPAA Final Rule [PDF]
Insights
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow.
Client Alert | 10 min read | 09.11.26
Mining, Indigenous Consultation Rights, and Investment Treaty Protection
Client Alert | 2 min read | 09.11.26
New ISOO Guidance Directs Federal Agencies to Provide More CUI Guidance to Contractors
Client Alert | 4 min read | 09.10.26
European Commission Publishes Landmark Guidelines on Exclusionary Abuses by Dominant Companies
